Director, Product Security

Green Dot Corporation; Northern (KY); Hybrid; USD 160,000 - 230,000; Full time

Job summary

Green Dot Corporation is seeking a senior security leader to oversee product/application security. You will drive strategy, roadmap development, and cross-functional collaboration with DevOps, Engineering, and Product teams to embed security across the CI/CD lifecycle.

You will lead a team, assess risk, and guide the selection of security technologies while influencing stakeholders and shaping policies to protect our platforms and customers.

Qualifications

• Bachelor’s degree required.
• 8+ years within Information Security and 2+ years within a Product or Application Security role.
• 3+ years within a leadership role preferred.
• Proven ability to influence cross-functional teams.
• Deep understanding and proven track record of leading a team to transform the efforts of an engineering organization to industry best practices.
• Proven ability to partner and influence internal and external stakeholders.
• Ability to develop and drive policies, practices, and procedures.
• Familiarity with SAST and DAST tools and processes.

Responsibilities

• Oversee the organization's application security strategy and develop realistic roadmaps and priorities.
• Partner with DevOps, Engineering and Product to design and build scalable and automated processes as part of a CI/CD pipeline.
• Evaluate and select new technologies, tools, and vendors to help manage the continual improvement of application security practices and platforms.
• Execute your vision and help decide what security issues the organization should prioritize.
• Be hands-on and able to deep-dive technical security findings while you mature the program to track from identification and help the engineers get to remediation.
• Manage the product security team responsible for the development and implementation of security specifications for new products (including systems, applications and/or other solutions) and enhancements to existing products.
• Determines the technical guidelines and features of the security architecture framework in product development.
• Identifies areas of security risk and makes recommendations to reduce those risks.
• Directs the activities of the cybersecurity function across product engineering groups.
• Evaluates product security strategies and requirements, identifies integration issues and prepares cost estimates.
• Oversees the analysis of product security engineering tasks and prepares security specifications and recommendations.
• Performs other duties as needed.

Skills

Security leadership

Cross-functional collaboration

CI/CD

SAST/DAST

Web/mobile security

Policy development

Stakeholder management

Communication skills

Education

Bachelor's degree

Tools

SAST tools

DAST tools

CI/CD tooling

Job description

Job Description

We’re looking for talented professionals to join us in bringing smart money management and payment solutions to everyone’s fingertips.

Job Responsibilities

• Oversee the organization's application security strategy and develop realistic roadmaps and priorities.
• Partner with DevOps, Engineering and Product to design and build scalable and automated processes as part of a continuous integration and continuous delivery (CI/CD) pipeline.
• Evaluate and select new technologies, tools, and vendors to help manage the continual improvement of application security practices and platforms.
• Execute your vision and help decide what security issues the organization should prioritize.
• Be hands-on and able to deep-dive technical security findings while you mature the program to track from identification and help the engineers get to remediation.
• Manage the product security team responsible for the development and implementation of security specifications for new products (including systems, applications and/or other solutions) and enhancements to existing products.
• Determines the technical guidelines and features of the security architecture framework in product development.
• Identifies areas of security risk and makes recommendations to reduce those risks.
• Directs the activities of the cybersecurity function across product engineering groups.
• Evaluates product security strategies and requirements, identifies integration issues and prepares cost estimates.
• Oversees the analysis of product security engineering tasks and prepares security specifications and recommendations.
• Performs other duties as needed.

Job Requirements

• Bachelor’s degree required
• 8+ years within Information Security and 2+ years within a Product or Application Security role
• 3+ years within a leadership role preferred
• Proven ability to influence cross-functional teams
• Deep understanding and proven track record of leading a team to transform the efforts of an engineering organization to industry best practices
• Proven ability to partner and influence internal and external stakeholders
• Ability to develop and drive policies, practices, and procedures
• Familiarity with SAST and DAST tools and processes
• Deep experience of web application and mobile security defects and how to prioritize appropriately
• Knowledge of CI/CD best practices
• Excellent communication skills in verbal, written, and presentation settings with a range of audiences both business and technical, individual contributor and leadership

We’re Here to Support You - Accommodations Upon Request

Green Dot is committed to providing an inclusive and accessible hiring experience for all candidates. If you require a reasonable accommodation during any part of the application or interview process, we encourage you to let us know. We will work with you to meet your needs in a way that respects your privacy and ensures equal opportunity. Our goal is to support every applicant in showcasing their talents and potential.

Work Authorization Requirement

At Green Dot Corporation, we value diversity and strive for fair and inclusive hiring practices. However, we are currently unable to offer visa sponsorship. All applicants must be legally authorized to work in the United States at the time of application and throughout the duration of employment, without the need for current or future sponsorship.

Green Dot Corporation (NYSE: GDOT) Overview

Green Dot Corporation (NYSE: GDOT) is a financial technology and registered bank holding company committed to transforming the way people and businesses manage and move money, and making financial wellbeing and empowerment more accessible for all. Our proprietary technology enables faster, more efficient electronic payments and money management, powering intuitive and seamless ways for people to spend, send, control and save their money. Through our retail and direct bank, we offer a broad set of financial products to consumers and businesses including debit, prepaid, checking, credit and payroll cards, as well as robust money processing services, tax refunds, cash deposits and disbursements. Our Banking as a Service ("BaaS") platform enables a growing list of America's most prominent consumer and technology companies to design and deploy their own customized banking and money movement solutions for customers and partners in the US and internationally. Founded in 1999 and headquartered in Provo, UT, our company has served more than 33 million customers directly, and now operates primarily as a "branchless bank" with more than 90,000 retail distribution locations nationwide. Green Dot Bank is a subsidiary of Green Dot Corporation and member of the FDIC.

What We Do

We build simple, seamless and secure financial tools for our customers and powerful solutions that fuel engagement, trust and value for partners.

Our Mission

We give you the power to bank seamlessly, affordably and with confidence.

Our Purpose

Access should not be a privilege, and we envision a world where modern banking and money management are at everyone's fingertips - where banking enhances the flow of life.

Our Values

Stewardship, Trust, Action, High Performance, and Teamwork.